Loading HuntDB...

GHSA-m7mf-48hp-5qmr

GitHub Security Advisory

Inappropriate implementation in V8

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

CVE-2020-16009: Inappropriate implementation in V8

- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16009

Google is aware of reports that exploits for CVE-2020-16009 exist in the wild.

Allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

There is currently little to no public information on the issue other than it has been flagged as `High` severity.

Affected Packages

NuGet CefSharp.Common
Affected versions: 0 (fixed in 86.0.241)
NuGet CefSharp.Wpf
Affected versions: 0 (fixed in 86.0.241)
NuGet CefSharp.WinForms
Affected versions: 0 (fixed in 86.0.241)
NuGet CefSharp.Wpf.HwndHost
Affected versions: 0 (fixed in 86.0.241)

Related CVEs

Key Information

GHSA ID
GHSA-m7mf-48hp-5qmr
Published
December 2, 2020 6:28 PM
Last Modified
June 6, 2023 6:43 PM
CVSS Score
7.5 /10
Primary Ecosystem
NuGet
Primary Package
CefSharp.Common
GitHub Reviewed
✓ Yes

Dataset

Last updated: November 24, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.